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Abstract 

Quantum walks are quantum counterparts of Markov chains. In this article, we give a brief 
overview of quantum walks, with emphasis on their algorithmic applications. 

1 Introduction 

Markov chains have an important role in randomized algorithms (for example, algorithms for ap- 
proximating permanent and other hard problems and volume estimation ^). Recently, quantum 
counterparts of Markov chains have been defined [HOI IS IS], with the hope that they could have 
similar applications in design of new quantum algorithms. It was immediately noticed that quan- 
tum walks behave quite differently from their classical counterparts. Recently, several algorithms 
using quantum walks have been invented. 

In this paper, we survey results on algorithmic applications of quantum walks. Sections |21 and 
131 give the background on quantum walks. In particular, section ^ explains basics of quantum 
walks, using quantum walk on the line as an example. Then, in section |31 we show how to define 
a quantum walk on an arbitrary graph. After that, in sections ^ and [3 we describe the known 
algorithms that use quantum walks. Those algorithms can be classified into two groups: algorithms 
achieving exponentially faster hitting times |H1 El and quantum walk search jlUl llll 1121 113j . 
We describe the first group in section^ and the second group in section |S1 At the conclusion, we 
present some open problems in sectional 

Besides the algorithmic aspects described in the current paper, there are many other interesting 
results about quantum walk. We refer the reader to an excellent survey by Kempe jl4j for more 
information about quantum walks in general. 



2 Quantum walk on the line 

Quantum walk on a line is a simple example which shows many properties of quantum walks. It is 
also often useful as a tool in the analysis of quantum walks on more complicated graphs. (We will 
show two examples of that in sections and El) 
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2.1 Discrete quantum walk 

In a classical random walk on the line, we start in location 0. At each time step, we move left with 
probability 1/2 and right with probability 1/2. 

The straightforward counterpart would be a quantum process with basis states \n), n £ Z. At 
each time step, it would perform a unitary transformation 

In) — > a\n — 1) + b\n) + c\n + 1), (1) 

which means move left with some amplitude a, staying at the same place with amplitude b and 
moving right with amplitude c. Moreover, we would like the process to behave in the same way in 
every location. That is, a, b and c should be independent of n (just like the probabilities of moving 
left/right are independent of n in the classical walk). Unfortunately, this definition does not work. 

Theorem 1 ^3J The transformation U defined by equation ^^ is unitary if and only if one of 
following three conditions is true: 

1. |a| = 1, 6 = c = 

2. \h\ = l, a = c = Q 

3. Id = 1, a = 6 = 

Thus, the only possible transformations are the trivial ones (ones that, at each step, either 
always move left or always stay in place or always move right). The same problem also appears 
when defining quantum walks on many other graphs. 

It can be solved by introducing an additional "coin" state. We consider the state space consisting 
of states |n, 0) and |n, 1) for n £ Z. At each step, we do two operations: 

1. A "coin flip transformation" C 

C\n,0) = a\n,0) + b\n,l), 
C\n,l) = c\n,0) +d|n, 1). 

2. Shift S: 

5|n,0) = |n- 1,0), S|n, 1) = |n + 1, 1). 
A step of quantum walk is SC. The most common choice for C is the Hadamard transformation 
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Any other unitary transformation in 2-dimensions can be also used. 

We can think of C as a quantum counterpart of coin flip in which we decide in which direction to 
move. To see this analogy, consider the modification in which, between C and S, we measure the 
state. If the state before C is |n, 0), then the state after C is ;^|?^, 0) + -^\n, 1) and measuring it 
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yields \n, 0) and |n, 1) with probabilities 1/2 each. If the state before C is |n, 1), then the state after 
C is -^l"-, 0) — "^l"-) !)• Measuring this state also yields \n, 0) and |n, 1) with probabilities 1/2 each. 
Thus, C is now equivalent to probabilistically picking one of \n, 0) and \n, 1) with probabilities 1/2 
each. 

However, in the quantum coin flip we do not measure the state. This leads to a clearly different 
results. Consider the first three steps of quantum walk, starting in state |0, 0). 

-|-1,0) + -|-1,1) + -|1,0)--|1,1)^ 
^|-2,0) + i|0,l) + i|0,0)-i|2,l)^ 
2,0) + ^| -2,1) + — 10,0) p|2,0) + ^|2,1) ^ 



2^/2 ' 2V2 V2 2^/2 ' 2^/2 

3,0) + ^1 - 1, 1) + ^1 - 1,0) p|l,0) + ^|3, 1). 



2^2 ' 2^/2 V2 2V2 ' 2^/2 

The result of first two steps is quite similar to classical random walk. If, after the second step, 
we measured the state, we would find n = —2 and n = 2 with probability 1/4 and n = with 
probability 1/2. This is exactly what we would have had in a classical random walk. 

The third step is different. In the coin flip stage, the state ^|0, 1) + ^|0, 0) gets mapped to 
-^|0,0). In the classical random walk, we would choose left and right direction with probabilities 
1/2 each. In the quantum case, we end up going to the left with all the amplitude. This is the 
result of quantum interference. 

The difference becomes more striking as large times are considered. If we start at location and 
run classical random walk for t steps, the probability distribution approaches normal distribution. 
In the quantum case, the corresponding experiment would be starting quantum walk in the state 
|0,0), running t steps of quantum walk (which result in the transformation (SC)*) and measuring 
the flnal state. This yields probability distribution of the form shown in figure ^ which is very 
different from the normal distribution. 

First, the distribution is biased towards left. The drift to the left is a consequence of slightly 
non-symmetric coin flip transformation. (In equation @, the amplitude of going from |n,0) to 
|n,0) is a = but the amplitude of going from \n, 1) to \n, 1) is d = ~"^-) It disappears if more 
symmetric coin 
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is used. The probability distribution for this coin transformation is shown in figure |2 Two other 
quantum effects remain for almost any choice of coin transformation and starting state [5l [T5]. 

1. The maximum probability is reached for |n| ~ 
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Figure 1: Probability distribution of quantumFigure 2: Probability distribution of quantum 
walk after 20 steps with coin flip walk after 20 steps with coin flip (jSJ. 

2. There are ^l{t) locations n for which the probability of measuring |n, 0) or |n, 1) is n{]). This 
means that the expected distance between the starting location and the location which we 
measure after t steps is Q{t). 

Both of those sharply contrast with the classical random walk. In the classical random walk, the 
maximum probability is reached for n ~ 0. This has a simple intuitive explanation: the number of 
steps to the left is approximately equal to the number of steps to the right. Second, the probability 
of being more than 0(\/t) steps from the origin at time t is negligible. 

Can we exploit any of those properties to design fast quantum algorithms? The second property 
seems to be most promising. It means that quantum walk spreads quadratically faster than its 
classical counterpart. 

The probability distribution generated by running quantum walk for t steps and measuring it 
has been studied in more detail in refs. [5l ll5l[TBlll7lll8j . Other interesting quantum effects appear 
if we add boundary conditions to the line El 1201 • 

2.2 Continous walk 

Farhi and Gutman have defined continous time quantum walk. In continous time, introducing 
"coin" state is not necessary. Instead, one can define walk on the line on the set of states |n), 
n E Z. To do that, we take Hamiltonian H defined by H\n) = —\n — 1) + 2|n) — |n + 1). Running 
quantum walk for time t is just applying the transformation C/*^*. 

The results about discrete and continous walk are often similar but the relation between the two 
is unclear. In the classical world, continous walk can be obtained as a limit of the discrete walk. In 
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quantum case, this does not seem to be true because discrete walk has a coin but continous walk 
does not. 



3 Quantum walks on general graphs 

How do we generalize the quantum walk on the line to more general graphs? Continous walk can 
be extended to a general graph quite easily [7j. We take Hamiltonian H defined by Hij = — 1 if 
i ^ j and vertices i and j are connected by an edge and Ha = di where di is the degree of vertex 
i. Then, running quantum walk for time t is just applying the transformation e^^^. 

For discrete quantum walk, defining it on an arbitrary graph is more difficult. The first papers 
[1] only defined it on graphs where every vertex has the same number of outgoing edges. However, 
there is a simple way to define a quantum walk on an arbitrary undirected graph^. 

Let V be the set of vertices and E be the set of edges. We use basis states |f , e) for all w G y 
and e £ E such that the edge e is incident to the vertex v. One step of quantum walk now consists 
of the following: 

1. For each v, we perform a coin flip transformation on the states \v, e), e adjacent to v. 

2. We perform shift S defined as follows. If edge e has endpoints v and v' , then S\v, e) = \v' , e) 
and S\v' , e) = \v, e). 

A very natural choice for is Grover's diffusion (first used in Grover's search algorithm [23 j). If 
there are m edges e incident to vertex v, we apply the transformation described by matrix 

( -1 + ^ ^ ... ^ \ 

mm m 
m m ' ' ' m 

\ ^ ^ ... -1 + ^ I 

\ m m ' m / 

to states \v,e). The logic behind this transformation is very simple. Typically, we would like to 
treat all edges adjacent to v in the same way. Thus, the amplitude of staying in the same state \v,e) 
should be the same for all e. Similarly, for all e and e', e ^ e' , the amplitude of moving from \v, e) 
to \v,e') should be the same for all e and e'. The transformation Dm satisfies these requirements. 
Moreover, the only unitary matrices with real entries satisfying this requirement are Dm, —Dm, I 
(identity) and — /. Since I leads to trivial results (if we go from v' to v via edge e in one step, we 
go back to v' via the same edge in the next step). Dm is the natural choice. 

A possible exception is if v has exactly two edges adjacent to it. Then, Dm is equal to the matrix. 

<^x = 

A possible alternative in this case is the matrix of equation Q which is complex valued but treats 

both of adjacent vertices in the same way. 

Next, we describe the known quantum algorithms using quantum walks. They can be broadly 

classified into two groups. 

^This definition was first discovered by Watrous |21) and then rediscovered by several other authors. A difi'erent 
approach to this problem can be found in |22) . 
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4 Exponentially faster hitting 



The algorithms of this type include El El EI ■ In this group of algorithms, we have a known graph 
G. We start in one vertex A and would like to reach a certain target vertex B. For example, in 
0, we have the graph shown in figure |21 and would like to go from the left vertex A to the right 
vertex B. At one step, we can choose one of edges adjacent to the current vertex and move to the 
other endpoint of this vertex. The difficulty is that edges and vertices are not labelled and we do 
not know which of possible moves takes us in the right direction. 

One solution would be to do classical random walk, starting from A. Then, the number of steps 
till we first enter B is typically polynomial in the number of vertices of G. For graphs with regular 
structure, quantum walks can do much better. For examplefT], consider two full binary trees of 
depth d with roots A and B. Glue each leaf of the first tree with a leaf of the second tree. The 
resulting graph is shown in figure El It has 0(2^) vertices. If we start in A and do a classical 
random walk, it will take 0(2"^) steps to reach B. 

Childs et al. showed that a continous^ quantum walk on G can reach B from A in 0{(P) 
steps. They take basis states \i) with i corresponding to vertices of G and define a Hamiltonian H 
by Hij = —1 if i,j are adjacent and Ha = di (as described in sectionEJ. Then, t steps of quantum 
walk is just the unitary transformation E^^^ . 




Figure 3: "Glued trees" graph of Childs, Farhi and Gutman [7]. 

It might seem that analyzing quantum walk on G is more difficult than analyzing the walk on 
line (because G has a more complicated structure). However, there is a clever reduction to the 
walk on line |7]. Partition vertices into 2d + 1 sets S^d^ S.^+i, . . ., 5"^. The set S^d contains just 
the vertex A. The set S-d+i contains vertices which are reached by walking i edges to the right 
from A. In particular, Sq contains all the vertices of degree 2 in the middle and Sd contains just 
the vertex B. It is easy to see that \Si\ = \S-i\ = 2"^"*. We define = — ^== ^^g^j. \v). Let Ti 

be the subspace spanned by states IV'i), i G {—d, —d + !,...,(/}. Then, it can be shownjT] that 
Hamiltonian H maps Ti to itself. This means that e*^* also maps Ti to itself. 

Moreover, H maps each I'i/'j) to a superposition of iV'j-i), iV'j) and iV'j+i)- (For each v S Si, H\v) 
includes only v and its neighbours. If S S'j, then the neighbours of v belong to Si-i and S'j+i.) 
Thus, we have a variant of continous quantum walk on line, with matrix H slightly different from 

^Computer simulations suggest that a similar result is also true for discrete walks, for example, with the definition 
of discrete walk on general graphs described in section 
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one described in section It can be analyzed using similar methods [71 IH]. The result is that, if 
we start the walk in state \A) run for t = 0{d) steps and measure the state, then the probability of 
measurement giving the state \B) is Repeating this process d times finds B with a constant 

probability in time 0{d^). 

Essentially, this is an effect similar to one described for discrete walk on the line in section ITTl 
After 0{t) time, the walk is in a superposition where c *t locations have probability ^{j). This 
effect is true for both continous and discrete walk. 

To summarize, classical random walk takes 0(2*^) steps to find B from A but quantum walk of 
[3 IH] takes 0{d^) steps. To claim an exponential speedup, it is also necessary to show that any 
classical algorithm (not just classical random walk) requires exponentially larger number of steps. 
This was shown in |H] for a slight modification of the above graph. 

An important open problem is how to use this effect to design a quantum algorithm for a natural 
problem. Problems involving Cayley graphs of groups might be good candidates because those 
graphs have quite regular structure. 

5 Quantum walk search 

The algorithms of this type include refs. jlUl 1111 IT^ I13j . The basic situation is as follows. We 
have a graph G in which some vertices are marked. In one step, we are allowed to query if the 
current vertex is marked or move to an adjacent vertex. Let be the number of vertices and M 
be the longest distance between two vertices. Then, Grover's algorithm [SB] finds a marked vertex 
by querying just 0{VN) vertices. 

The problem is that, for any two vertices v, v' , there is a possibility that v is queried in one query 
and v' is queried in the next query. Thus, between each two queries, the algorithm might have to 
move distance M. This results in the total running time 0(\/iVM). 

While queries are required for search [21], we can design better algorithms by decreasing 

the number of moving steps. Quantum walks are useful for that in several different cases. 

For discrete time quantum walks, the basic algorithm is as follows. For each vertex, we define 
two "coin flip" transformations Cy and C'^. In each step of the quantum walk, we query if the 
current vertex is marked. If it is not marked, we apply C^, otherwise, we apply C^. Then, we 
perform a shift S in the same way as before (sections 12 El • 

5.1 Searching hypercube 

The first algorithm of this type was discovered by Shenvi et al. for searching the Boolean 
hypercube. In the Boolean hypercube, we have N = 2^ vertices Vx indexed by n bit strings. Two 
vertices Vx and Vy are connected by an edge if the corresponding strings x and y differ in exactly one 
place. The maximum distance between two vertices is n = log A. Thus, Grover's algorithm could 
search this graph in 0{^/N log N) steps. Shenvi et al. ^Uj showed how to search it by quantum 
walk in 0(\/]V) steps. Consider Hilbert space spanned by where x G {0,1}" corresponds 

to a vertex of hypercube and i S {1, . . . ,n} corresponds to an edge. The algorithm of ^0] is as 
follows. 
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1. Generate the starting state ^^„^ Ylix,i 

2. Perform 0{^/N) steps, with each step consisting of 

(a) Apply Dn to \i) register if the vertex x is not marked. Apply — / to |i) register if the 
vertex x is marked. 

(b) Apply shift S defined by 

\x)\i)^W)\i) 

where is the bit string obtained by flipping the i"^ bit in x. 

If there is no marked items, then the algorithm stays in the starting state —^==J2xi If 
there is a single marked vertex Vx, then, running this algorithm for 0{^/N) steps and measuring 
the state gives \x,i) for the marked x and some i with high probability (cf. Shenvi et al. |lf)j). 
The analysis is by reducing the walk on hypercube to the walk on line, somewhat similarly to the 
result of Childs et al. [7] described in the previous section. 

5.2 Searching a grid 

A second example is if N items are arranged on \/]V x \/]V grid. Then, finding a marked item by 
usual quantum search takes 0{^/N = 0{N) steps, resulting in no quantum speedup ,25,. For 
d-dimensional N^I'^xN^/'^ . . . N^/'^ grid, the usual quantum search takes 0{\fN *N^/'^) = 0{N2 + d) 
steps. Childs and Goldstone [T^ studied quantum search on grids by continous walk and Ambainis 
et al. studied search by discrete walk. Surprisingly, continous and discrete walks gave different 
results. Continous quantum walk algorithm gave an 0{^/N) time quantum algorithm for d > 5, 
an 0(\/]VlogA^) time algorithm for d = A and no speedup in 2 or 3 dimensions Discrete 
time quantum walk gave an 0(\/iV) time algorithm for d>3 and 0{\/^ log N) time algorithm for 
d = 2.(13] 

Another surprising result was that discrete walk algorithm was very sensitive to the choice of 
coin transformations Cy and C(,. One natural choice of coin transformations gave an 0{y/N log N) 
step search algorithm while other natural choices gave either no quantum speedup in less than 4 
dimension or no speedup at all.^H] 

5.3 Element distinctness 

The third application of quantum walk search is element distinctness. 

Element Distinctness. Given numbers xi, . . . ,X]\f £ [M], are there i,j £ [N], i ^ j such that 

T ■ T ■ '? 

iju 2 — J • 

Classically, element distinctness requires Q.{N) queries. Ambainis jl2j has constructed an 0{N'^/^) 
query quantum algorithm using ideas from quantum walks. (Previously, an 0{N^/'^) query quantum 
algorithm was known |^. 0(A^^/^) is optimal, as shown by refs. |281 129j .) 

The main idea is as follows. We have vertices vs corresponding to sets S C {1, . . . , A'^}. Two 
vertices vs and vt are connected by an edge if sets S and T differ in one variable. A vertex is 
marked if S contains i,j such that At each moment of time, we know Xi for all i £ S. 

This enables us: 
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1. Check if the vertex is marked with no queries. 

2. Move to an adjacent vertex vt by querying just one variable Xi for the only i such that i G T, 
i i S. 

Then, we define quantum walk on subsets S. ^2] shows that, if xi, . . . ,xn are not distinct, this 
walk finds a set S containing z, j : Xi = Xj in O^N"^/^) steps. 

Unlike in the previous two examples, the formulation of the problem does not involve an obvious 
graph on which to define quantum walk. Constructing the graph is a part of solution to the problem, 
not the problem itself. 

Extensions of this algorithm also solve several other problems. 

Element ^-distinctness. Given numbers xi, . . . ,xn G are there k distinct indices ii, . . . ,ik G 
[A^] such that Xj^ = = • . . = x^^l 

Element ^-distinctness can be solved in 0(iV'=/('^+i)) steps :12;. It can be generalized to finding 
set of k element satisfying a certain property. This problem can be also solved in 0(A^'^/('^+i)) 
quantum steps '30!. 

Triangle finding. We are given a graph G on n vertices, described by variables Vij, Vij = 1 if 
there is an edge between vertex i and j and Vij = otherwise. Determine if graph G contains a 
triangle (vertices k such that Vij = Vik = Vjk = 1). 

Triangle finding can be solved with 0(n^'^) queries jHJ by a quantum algorithm that uses element 
distinctness as a subroutine. Similar approach also gives quantum algorithms for finding A;-cliques 
(sets of k vertices with an edge between every two of them) \M\ 

6 Conclusion and open problems 

Quantum walks provide a promising source of ideas for new quantum algorithms. Several quantum 
algorithms using ideas from quantum walks have already been developed. In this paper, we surveyed 
those algorithms and some of techniques used to prove their correctness. 
Some open problems are: 

1. Exponential speedup for natural problems. Can we use the exponentially faster hitting 
discovered by refs. |6ii7t|8j to get speedups for natural problems? 

2. Relation between discrete and continous quantum walks. Can discrete and continous 
quantum walks can be obtained one from another in some way? This is the case for classical 
random walks. However, in the quantum case, the relation between discrete and continous 
walks is unclear, because one of them uses coin registers and the other does not. 

3. Improving A;- distinctness, triangle and A;-clique algorithms. The 0{N'^^^) element 
distinctness algorithm is known to be optimal 28^. However, the best lower bound for k- 
distinctness is only Q(A^^/^) ^2j and the best lower bounds for triangles and fc-cliques are 
Q(n). Thus, better quantum algorithms might be possible for all of those problems. 

4. Other applications for quantum walk search. In section |S1 we showed how to solve 
three problems in the same framework of searching a graph. It seems likely that there might 
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be other problems which can be described as search on graphs. Then, quantum walks might 
be applicable to those problems as well. 

Acknowledgements. I would like to thank Viv Kendon and Alexander Rivosh for useful 
comments. 

References 



[1] 

[2] 
[3] 
[4] 
[5] 
[6] 

[7] 

[8] 
[9] 
[10] 

[11] 
[12] 

[13] 

[14] 



R. Motwani, P. Raghavan. Randomized Algorithms, Cambridge University Press, 1995. 

Y. Aharonov, L. Davidovich, and N. Zagury. Quantum Random Walks. Physical Review A, 
48:1687, 1993. 

D. Meyer. Prom quantum cellular automata to quantum lattice gases. Journal of Statistical 
Physics, 85:551-574, 1996. Also quant-ph/9604003| 

D. Aharonov, A. Ambainis. J. Kempe, and U. Vazirani. Quantum walks on graphs. Proceedings 
of STOC'Ol, pp. 50-59. Iquant-ph/OOTSo^aol 

A. Ambainis, E. Bach, A. Nayak, A. Vishwanath, and J. Watrous. One-dimensional quantum 
walks. Proceedings of STOC'Ol, pp. 37-49. 

E. Farhi, S. Gutmann. Quantum computation and decision trees. Physical Review A, 58:915- 
928, 1998. Also quant-ph/9706062 

A. Childs, E. Farhi, S. Gutmann. An example of the difference between quantum and 
classical random walks. Journal of Quantum Information Processing, 1:35, 2002. Also 
[qua,nt-ph/0103020 

A. Childs, R. Cleve, E. Deotto, E. Farhi, S. Gutmann, D. Spielman Exponential algorithmic 
speedup by quantum walk. Proceedings of STOC'03, pp. 59-68. quant-ph/02091 31 , 

J. Kempe. Quantum random walks hit exponentially faster Proceedings of RANDOM'03, Lec- 
ture Notes in Computer Science, 2764:354-369, 2003. Also .quant-ph/0205083, 

N. Shenvi, J. Kempe, K. Whaley. Quantum random-walk search algorithm. Physical Review 
A, 67:052307, 2003. Also ,quant-p h/0210064( 



A. Childs, J. Goldstone. Spatial search by quantum walk, quant-ph/0306054 



A. Ambainis. Quantum walk algorithm for element distinctness, quant-ph /0311001| 



A. Ambainis, J. Kempe, A. Rivosh. Coins make quantum walks faster, quant-ph/0402107} 



J. Kempe. Quantum random walks - an introductory overview, Contemporary Physics, 44:307- 
327, 2003. Also |quant-ph /0303081| 



[15] A. Nayak, A. Vishvanath. Quantum walk on the line, quant-ph /OO 1 1 17| 



10 



[16] N. Konno. A New Type of Limit Theorems for the One-Dimensional Quantum Random Walk. 
|quant-ph /0206103' 

[17] H. Carteret, M. Ismail, B. Richmond. Three routes to the exact asymptotics for the one- 
dimensional quantum walk. Journal of Physics A, 36:8775-8795, 2003. Also quant-ph/0303105| 



[18] G. Grimmett, S. Janson, P. Scudo. Weak limits for quantum random walks. quant-ph/0309135l 



[19] E. Bach, S. Coppersmith, M. Goldschen, R. Joynt, J. Watrous. One-dimensional quantum 
walks with absorbing boundaries, ,quant-ph/0207008, , 

[20] T. Yamasaki, H. Kobayashi, H. Imai. Analysis of absorbing times of quantum walks. Physical 
Review A, 68:012302, 2003 q uant-ph/ 0205045^ 

[21] J. Watrous. Quantum simulations of classical random walks and undirected graph connectivity. 
Journal of Computer and System Sciences, 62(2):376-391, 2001. Also |cs.CC/9812012| 



[22] V. Kendon. Quantum walks on general graphs, quant-ph/0306140 



[23] L. Grover. A fast quantum mechanical algorithm for database search. Proceedings of STOC'96, 
pp. 212-219, quant-ph/9605043, 

[24] C. Bennett, E. Bernstein, G. Brassard, U. Vazirani. Strengths and weaknesses of quantum 
computation. SIAM Journal on Computing, 26: 1510-1523, 1997. 

[25] P. Benioff. Space searches with a quantum robot. Quantum Computation and Quantum In- 
formation: A Millennium Volume, AMS Contemporary Mathematics Series, 2002. Also 
[quant-ph/0003006.. 

[26] S. Aaronson, A. Ambainis. Quantum search of spatial structures. Proceedings of FOCS'03, pp. 
200-209. Also .quant- ph/0303041, 

[27] H. Buhrman, C. Durr, M. Heiligman, P. Hoyer, F. Magniez, M. Santha, and R. de Wolf. 
Quantum algorithms for element distinctness. 16th IEEE Annual Conference on Computational 
Complexity (CCC'Ol), pp.131-137, ,quant-ph/0007016, 

[28] Y. Shi. Quantum lower bounds for the collision and the element distinctness problems. Pro- 
ceedings ofFOCS'02, pp. 513-519. quant-ph/0112086j 

[29] A. Ambainis. Quantum lower bounds for collision and element distinctness with small range, 
quant-ph/0305179| 



[30] A. Childs, J. Eisenberg. Quantum algorithms for subset finding, |quant-p h/0311038} 

[31] F. Magniez, M. Santha, M. Szegedy. An 0{n^-^) quantum algorithm for the triangle problem. 
rquant-ph/0310134, 



11 



